Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-42477 EUVD-2023-46917GHSA-pvcj-pg6x-h564

Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)

Published Oct 10, 2023 · Updated Sep 18, 2024 · Assigned by sap

Description

SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver AS Java 7.50 —

Advisories 2

References